Forum Federato

Di Piero Bosio

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

undefined

Nicolás Alvarez

@nicolas17@social.treehouse.systems

Da chi è seguito

0

Visualizza l'originale

Post

the reported version of a server software is not necessarily indicative of it being vulnerable to an exploit or not, the software may have had a fix backported or had been deployed in a configuration where the vulnerability wasn’t relevant.

undefined Nicolás Alvarez

@ariadne KDE regularly receives reports like "Severity: High, directory listing is enabled on https://amarok.kde.org/images/", usually begging for bounties. I guess they think automated security scanners are get rich quick schemes they can use.

Senza categoria